Easier to read with cream paper, a tint, more contrast or larger text? Choose your colours and text, once, for every page.

Preview

CS 1.23: CIA and IAAA: the exact words

This is the first page of the lesson. Read it and have a go at the activities. The rest is in the full lesson.

55 minutes

One word can change the answer

A report says "the data was breached". Was it read by a stranger? Was it changed? Was it lost? Each answer needs a different fix.

Security has exact words so that people can talk about a problem without confusion. Today you learn the first group.

Key words

WordWhat it means
CIA triadConfidentiality, integrity and availability: the three core goals of security.
ConfidentialityAccess to data, and changes to it, are limited to authorised users.
IntegrityData is kept in the right form, with no change that was not allowed.
AvailabilityAuthorised users can get to the data when they need it.
IAAAIdentification, authentication, authorisation, accountability: four steps of access control.
IdentificationA unique name for one person, such as a user name or an employee number.
AuthenticationChecking that a person really is who they say.
AuthorisationGiving permissions to users through an access control model.
AccountabilityActions can be traced to one user, so you can show who sent or did what.
Multi-factor authenticationProving who you are with two or more different kinds of proof. Short form: MFA.

The cells students fill in are left blank in this preview.

By the end of this lesson

Note

I can define the CIA triad and each step of IAAA, and use the right word for a real security problem.

Starter: what you already know

Have a go

Starter: what you already know

3 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The CIA triad

The CIA triad is the base of every security system. It has three parts.

Confidentiality: access to data, and changes to it, are limited to authorised users.

Integrity: data stays in the right form. Nobody changes it without permission.

Availability: authorised users can get the data when they need it.

Check: which part of the triad?

Have a go

Check: which part of the triad?

4 questions
Have a go: your answers are marked here and then forgotten. Sign in if you would like your score kept, and to pick up where you left off.Sign in to keep your score

Your answers are marked here and are not kept. A college account keeps every student’s marks.

The lesson goes on

9 more parts of this lesson are in the full curriculum, with the tasks, the final check and the labs. A college account gives your students all of it.